Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/bdc5499c-3d3a-3c25-a5b3-4eba476be187.roa
File:                     bdc5499c-3d3a-3c25-a5b3-4eba476be187.roa (raw, json)
Hash identifier:          rjpIk9H5NA3I4AdBmmbsP5fo1OTz6Yi0jWl79cWbvQg=
Subject key identifier:   02:B6:2E:CF:30:1C:27:6F:60:CF:95:14:15:B3:BF:18:4C:D7:BC:83
Certificate issuer:       /CN=355b6459-d3e6-4569-b278-aef1a714f5bf
Certificate serial:       010D0C9F4328584D1172634E28950F56B7772E00
Authority key identifier: CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/bdc5499c-3d3a-3c25-a5b3-4eba476be187.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     19108
IP address blocks:        204.63.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:63:4e:28:95:0f:56:b7:77:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355b6459-d3e6-4569-b278-aef1a714f5bf
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=28ca1cd1-5dba-482a-a44f-c20352c6756a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d0:5e:e2:fd:7a:e5:d6:f9:e1:40:57:59:3e:
                    4c:80:31:da:f2:d5:b3:aa:6d:e2:98:8c:5e:de:e6:
                    b0:91:8f:e1:f8:48:c2:d7:09:c5:89:0a:c4:a3:28:
                    e7:61:dc:d1:1e:df:2f:c7:e0:64:4f:2c:7c:f2:5e:
                    59:bf:cb:96:61:33:db:6a:db:fc:8b:8c:f5:67:4c:
                    59:90:c9:82:5b:12:ec:c6:d6:4b:88:40:39:0d:e3:
                    c2:f0:a8:31:b0:1e:8a:9e:6c:41:bf:0b:3e:20:6e:
                    05:93:2c:23:85:0f:25:48:02:90:62:79:49:73:97:
                    94:22:50:d8:24:5a:ef:ca:a6:8a:fe:e9:bb:ec:40:
                    9c:cc:ea:a5:c6:c5:c1:60:07:e7:12:08:a3:a4:f8:
                    48:e8:e2:22:e7:f1:3a:6f:84:1c:c7:c8:55:bd:2c:
                    4e:49:40:0a:66:57:85:7c:fb:30:98:c8:f5:9c:07:
                    ca:85:f5:b7:2a:e5:2a:04:1e:bc:33:e0:0c:8d:d4:
                    4b:cf:eb:fc:19:b7:b7:9d:20:70:34:e6:6b:28:c4:
                    85:c5:cf:17:b8:6f:e2:a9:e6:a6:db:72:5f:cf:5f:
                    e3:66:e5:ff:10:1d:64:ad:5b:15:38:b6:a9:a6:0d:
                    bd:75:51:f8:86:91:16:a4:c0:67:2f:b1:6a:53:fb:
                    f4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B6:2E:CF:30:1C:27:6F:60:CF:95:14:15:B3:BF:18:4C:D7:BC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/bdc5499c-3d3a-3c25-a5b3-4eba476be187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl

            X509v3 Authority Key Identifier:
                keyid:CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e5:21:74:3d:93:6b:f7:14:24:bf:22:d1:48:26:10:3e:77:
         8b:95:7d:b3:2c:59:db:a8:9f:1f:b3:3a:24:74:25:3f:0d:72:
         c9:38:a6:5c:5b:38:25:85:d9:c9:e3:5b:7d:08:e8:6c:a4:44:
         68:5d:37:ad:a9:68:e4:c9:2f:30:55:ea:07:ea:4e:35:01:e2:
         b7:3e:13:28:b2:ab:c4:b9:e7:4a:af:95:fc:25:3d:94:b9:77:
         a2:e3:ce:fc:b4:38:76:6f:b1:a3:16:5d:04:61:1e:06:2b:84:
         1a:4f:c4:e4:4c:0f:5e:a9:fd:70:b6:4c:4b:20:72:b6:7d:1d:
         30:df:97:2f:c6:a1:da:b4:d2:fb:af:82:90:ed:0f:40:ac:f0:
         fe:41:7b:38:8e:27:30:e9:eb:4c:8e:13:0b:72:0a:1b:d0:58:
         95:02:b0:a6:62:24:b1:da:6b:af:2b:f1:84:46:2d:54:dc:49:
         d8:ed:f4:59:50:f3:d5:ac:a0:fb:5d:2a:c3:e8:b8:1f:ba:45:
         89:5d:d8:bc:b9:96:63:f5:91:83:9f:05:24:d1:e9:8e:80:0b:
         89:93:36:57:5e:7e:ee:51:60:cb:a5:c8:80:e2:3c:d0:1b:81:
         11:e8:09:c0:fc:75:24:7f:60:96:79:d9:df:52:9a:93:00:c0:
         1a:cf:05:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:30:44 2026 by rpki-client